Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
File: Ety44UEMjNGOUkV_fhqVgNbaUiY.mft (raw, json)
Hash identifier: 6w50YXXm5KY+wL7+E216wTB2IJHMF+Hf3p2mPh5fBWs=
Subject key identifier: 94:2E:9C:10:8C:09:A4:88:8C:E2:1D:12:D8:8C:2F:58:60:75:55:00
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Certificate issuer: /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial: 019A53E3E25C1C312BE34156FF8399C7D7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
Manifest number: 0651
Signing time: Wed 05 Nov 2025 12:00:34 +0000
Manifest this update: Wed 05 Nov 2025 12:00:34 +0000
Manifest next update: Thu 06 Nov 2025 12:00:34 +0000
Files and hashes: 1: Ety44UEMjNGOUkV_fhqVgNbaUiY.crl (hash: z5xr+YqnidKCXHK1aRhxrW6MxRMapT8QQ1cvyp6uExw=)
2: jEDgNY90eysDT0Y1G-THT17h3-Q.roa (hash: RQYyUb9Y/6KY2/ltxA8FrdBGYW0gmfS1ieQyM7fG8UY=)
3: xjaKNbUWdjhuGKz557km09J85CQ.roa (hash: 3QMey7VrmUqxE6MUlNjFiwNKaAhFddLFlNFaj03POhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:e2:5c:1c:31:2b:e3:41:56:ff:83:99:c7:d7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Validity
Not Before: Nov 5 12:00:34 2025 GMT
Not After : Nov 6 12:00:34 2025 GMT
Subject: CN=942e9c108c09a4888ce21d12d88c2f5860755500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:3c:07:48:bf:67:e3:7e:57:b2:2b:6f:ca:
48:e3:45:18:19:17:1d:07:2a:47:b5:c0:8b:2b:cb:
e2:18:f8:fb:29:d0:61:3d:bf:d3:c8:3e:fe:90:5c:
f5:8a:26:c7:1f:82:6a:6b:00:7b:68:42:54:0b:20:
ac:10:f0:d8:67:63:52:70:9f:f0:a6:ef:b1:16:ae:
b6:c9:66:3e:9e:4a:0c:2d:df:91:15:e9:db:e3:77:
e5:26:e0:2a:1b:e2:24:16:12:83:d7:51:f3:85:90:
1b:3c:b9:d7:d4:23:88:70:63:72:9a:75:ba:65:2f:
56:88:ee:62:14:5b:3c:3b:98:91:9c:c9:61:bf:1d:
95:18:a8:b6:df:53:eb:0d:6f:f3:8d:cc:02:6f:f9:
b7:5d:3c:b8:33:b0:d7:b9:ca:8a:2f:b8:33:ee:34:
5c:2f:60:19:ce:46:c3:e8:ef:c9:f0:1c:d2:b8:65:
60:c9:9c:01:59:a4:70:f9:e8:ad:8b:0c:31:1c:58:
52:3f:97:4f:4e:8b:fd:68:55:83:3a:97:0d:35:76:
2f:8b:4d:2f:62:50:cf:6d:0e:2e:e1:13:7f:84:ee:
e1:26:6e:d2:7a:5c:ee:83:c8:98:91:fb:a1:85:c7:
8d:e0:54:a6:41:a4:c1:7a:49:66:e0:93:f7:92:64:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2E:9C:10:8C:09:A4:88:8C:E2:1D:12:D8:8C:2F:58:60:75:55:00
X509v3 Authority Key Identifier:
keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:85:79:50:5d:18:e8:73:da:d9:fc:f4:a7:60:c5:51:3b:61:
74:8a:58:90:e6:ee:e7:8a:a9:7f:79:c4:f3:c4:1a:25:a8:54:
94:95:07:a4:ad:79:89:0d:a4:29:b4:8a:81:b5:b9:1c:c9:ea:
dc:3b:0c:fd:8d:5f:00:80:6a:a1:40:b8:c5:58:c0:b2:df:3b:
c8:6c:75:9c:54:f6:05:2f:c8:c0:b3:be:de:47:78:a3:3e:6d:
45:fc:90:25:56:07:61:5f:83:ae:6f:c1:47:7f:d2:ae:be:de:
74:1a:bd:a7:b0:d7:39:80:33:03:df:4c:29:b1:60:19:b3:4b:
a7:b6:17:5c:d8:9e:78:2e:76:5f:3b:49:93:f0:ed:5f:e6:19:
68:5e:e3:1c:cc:02:52:2c:d0:86:5a:7f:be:eb:0e:fd:64:4a:
85:ca:7b:c6:35:53:61:40:ab:32:92:ab:39:de:ce:b2:94:f6:
a1:08:14:db:f4:df:db:f5:71:4e:03:1e:6e:46:50:74:4e:40:
2b:ba:39:94:68:8d:c3:22:1b:9e:a2:90:c8:4b:84:d8:b8:a7:
7b:71:b8:88:b9:f5:86:96:45:5e:44:75:e6:cf:a2:9a:19:7f:
82:75:26:7a:cf:05:05:b0:38:2f:26:f1:c5:54:3e:a8:c5:70:
2e:d7:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:21 2025 by rpki-client